Dell Force10 S55T FTOS Command Line Reference Guide for the S55 System FTOS 8. - Page 208

www.dell.com | support.dell.com The monitor option is relevant in the context of the flow-based monitoring feature only. See Chapter 29, Port Monitoring. Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead. permit tcp c e s Configure a filter to pass TCP packets meeting the filter criteria. Syntax permit tcp {source mask | any | host ip-address} [bit] [operator port [port]] {destination mask | any | host ip-address} [bit] [dscp] [operator port [port]] [count [byte] | log] [order] [monitor] [fragments] Parameters To remove this filter, you have two choices: • Use the no seq sequence-number command syntax if you know the filter's sequence number or • Use the no permit tcp {source mask | any | host ip-address} {destination mask | any | host ip-address} command. source mask any host ip-address bit dscp operator Enter the IP address of the network or host from which the packets were sent. Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous. Enter the keyword any to specify that all routes are subject to the filter. Enter the keyword host followed by the IP address to specify a host IP address. Enter a flag or combination of bits: ack: acknowledgement field fin: finish (no more data from the user) psh: push function rst: reset the connection syn: synchronize sequence numbers urg: urgent field Enter this keyword to deny a packet based on DSCP value. Range: 0-63 (OPTIONAL) Enter one of the following logical operand: • eq = equal to • neq = not equal to • gt = greater than • lt = less than • range = inclusive range of ports (you must specify two port for the port parameter.) 208 | Access Control Lists (ACL)